Enterprise information security policy assessment : an extended framework for metrics development utilising the goal-question-metric approach

Effective enterprise information security policy management requires review and assessment activities to ensure information security policies are aligned with business goals and objectives. As security policy management involves the elements of policy development process and the security policy as output, the context for security policy assessment requires goal-based metrics for these two elements. However, the current security management assessment methods only provide checklist types of assessment that are predefined by industry best practices and do not allow for developing specific goal-based metrics. Utilizing theories drawn from literature, this paper proposes the Enterprise Information Security Policy Assessment approach that expands on the Goal-Question-Metric (GQM) approach. The proposed assessment approach is then applied in a case scenario example to illustrate a practical application. It is shown that the proposed framework addresses the requirement for developing assessment metrics and allows for the concurrent undertaking of process-based and product-based assessment. Recommendations for further research activities include the conduct of empirical research to validate the propositions and the practical application of the proposed assessment approach in case studies to provide opportunities to introduce further enhancements to the approach.

Development of distributed fuzzy systems with a runtime-adaptable mobile components framework

A distributed fuzzy system is a real-time fuzzy system in which the input, output and computation may be located on different networked computing nodes. The ability for a distributed software application, such as a distributed fuzzy system, to adapt to changes in the computing network at runtime can provide real-time performance improvement and fault-tolerance. This paper introduces an Adaptable Mobile Component Framework (AMCF) that provides a distributed dataflow-based platform with a fine-grained level of runtime reconfigurability. The execution location of small fragments (possibly as little as few machine-code instructions) of an AMCF application can be moved between different computing nodes at runtime. A case study is included that demonstrates the applicability of the AMCF to a distributed fuzzy system scenario involving multiple physical agents (such as autonomous robots). Using the AMCF, fuzzy systems can now be developed such that they can be distributed automatically across multiple computing nodes and are adaptable to runtime changes in the networked computing environment. This provides the opportunity to improve the performance of fuzzy systems deployed in scenarios where the computing environment is resource-constrained and volatile, such as multiple autonomous robots, smart environments and sensor networks.

A classification framework for design-build variants from an operational perspective

Design-build (DB) is a generic form of construction procurement, and, rather than simply representing a single system, it has evolved in practice into a variety of forms, each of which is similar to, and yet different from each other. Although the importance of selecting an appropriate DB variant has been widely accepted, difficulties occur in practice due to the multiplicity of terms and concepts used. What is needed is some kind of taxonomy or framework within which the individual variants can be placed and their relative attributes identified and understood. Through a comprehensive literature review and content analysis, this paper establishes a systematic classification framework for DB variants based on their operational attributes. In addition to providing much needed support for decision-making, this classification framework provides client/owners with perspectives to understand and examine different categories of DB variants from an operational perspective.

Cinematic hooks for Korean studies: using the 'Apache' framework for inspiring students about Korea in and through film

Developing awareness of and maintaining interest in Korea and Korean culture for non-language secondary and tertiary students continues to challenge educators in Australia. A lack of appropriate and accessible creative and cultural materials is a key factor contributing to this challenge. In light of changes made to 'fair use' guidelines for the Digital Millennium Copyright Act in the United States in July 2010, and in order to prepare for a time in the near future when Australian copyright regulations might follow suit, this article offers a framework for utilizing film and digital media contents in the classroom. Case studies of the short digital animation film 'Birthday Boy' (2004) and the feature film The Divine Weapon (2008) are presented in order to illustrate new educational approaches to popular Korean films---the cinematic component of the 'Korean Wave' ('Hanryu' or 'Hallyu' in Korean). It is hoped that this work-in-progress will enable teachers to inspire students with limited language skills to learn more about Korean popular culture, history, and tradition as well as media, politics, and genre studies in dynamic ways through the use of films as cultural texts in the classroom.

Entertainment architecture : constructing a framework for the creation of an emerging transmedia form

This thesis investigates the radically uncertain formal, business, and industrial environment of current entertainment creators. It researches how a novel communication technology, the Internet, leads to novel entertainment forms, how these lead to novel kinds of businesses that lead to novel industries; and in what way established entertainment forms, businesses, and industries are part of that process. This last aspect is addressed by focusing on one exemplary es-tablished form: movies. Using a transdisciplinary approach and a combination of historical analysis, industry interviews, and an innovative mode of ‘immersive’ textual analysis, a coherent and comprehensive conceptual framework for the creation of and re-search into a specific emerging entertainment form is proposed. That form, products based on it, and the conceptual framework describing it are all re-ferred to as Entertainment Architecture (‘entarch,’ for short). The thesis charac-terises this novel form as Internet-native transmedia entertainment, meaning it fully utilises the unique communicative characteristics of the Internet, and is spread across media. The thesis isolates four constitutive elements within Entertainment Architec-ture: story, play, ‘dance,’ and ‘glue.’ That is, entarch tells a story; offers playful interaction; invites social interaction between producer and consumer, and amongst consumers (‘dance’); and all components of it can be spread across many media, but are so well interconnected and mutually dependent that they are perceived as one product instead of many (‘glue’). This sets entarch apart from current media franchises like Star Wars or Halo, which are perceived as many products spread across many media. Entarch thus embraces the commu-nicative behaviour of Internet-native consumers instead of forcing them to de-sist from it, it harnesses the strengths of various media while avoiding some of their weaknesses, and it can sustain viable businesses. The entarch framework is an innovative contribution to scholarship that al-lows researchers to investigate this emerging entertainment form in a structured way. The thesis demonstrates this by using it to survey business models appro-priate to the entarch environment. The framework can also be used by enter-tainment creators — exemplified in the thesis by moviemakers — to delimit the room for manoeuvre available to them in a changing environment.

Rapid prototyping framework for visual control of autonomous micro aerial vehicles

Rapid prototyping environments can speed up the research of visual control algorithms. We have designed and implemented a software framework for fast prototyping of visual control algorithms for Micro Aerial Vehicles (MAV). We have applied a combination of a proxy-based network communication architecture and a custom Application Programming Interface. This allows multiple experimental configurations, like drone swarms or distributed processing of a drone's video stream. Currently, the framework supports a low-cost MAV: the Parrot AR.Drone. Real tests have been performed on this platform and the results show comparatively low figures of the extra communication delay introduced by the framework, while adding new functionalities and flexibility to the selected drone. This implementation is open-source and can be downloaded from www.vision4uav.com/?q=VC4MAV-FW

A research framework for assessing the effects of heat stress on construction workers

Hong Kong in summer (June - October) is hot and humid. Construction workers have to undertake physically demanding activities and often in confined spaces. They are vulnerable to heat stress in summer hence health and safety measures associated to heat stress measured by scientific and clinical parameters are urgently needed. This paper provides an initial report of a research project funded by the Research Grants Council (RGC) of the HKSAR. The aim of this study is to develop a set of indices measured by clinical and scientific methods to detect impending attacks of heat stress. These indices would be of tremendous value in better safeguarding workers’ health and safety by reducing the occurrences of heat stress on site. This paper firstly reports on the statistics of construction incidents arising from heat stress. Qualitative and quantitative research methods applied in conducting the research are discussed. It is believed that the construction industry and the government would benefit a lot as a result of this study.

Developing a framework for planning healthy communities : the Logan Beaudesert health decision support system

In the last few decades, the focus on building healthy communities has grown significantly (Ashton, 2009). There is growing evidence that new approaches to planning are required to address the challenges faced by contemporary communities. These approaches need to be based on timely access to local information and collaborative planning processes (Murray, 2006; Scotch & Parmanto, 2006; Ashton, 2009; Kazda et al., 2009). However, there is little research to inform the methods that can support this type of responsive, local, collaborative and consultative health planning (Northridge et al., 2003). Some research justifies the use of decision support systems (DSS) as a tool to support planning for healthy communities. DSS have been found to increase collaboration between stakeholders and communities, improve the accuracy and quality of the decision-making process, and improve the availability of data and information for health decision-makers (Nobre et al., 1997; Cromley & McLafferty, 2002; Waring et al., 2005). Geographic information systems (GIS) have been suggested as an innovative method by which to implement DSS because they promote new ways of thinking about evidence and facilitate a broader understanding of communities. Furthermore, literature has indicated that online environments can have a positive impact on decision-making by enabling access to information by a broader audience (Kingston et al., 2001). However, only limited research has examined the implementation and impact of online DSS in the health planning field. Previous studies have emphasised the lack of effective information management systems and an absence of frameworks to guide the way in which information is used to promote informed decisions in health planning. It has become imperative to develop innovative approaches, frameworks and methods to support health planning. Thus, to address these identified gaps in the knowledge, this study aims to develop a conceptual planning framework for creating healthy communities and examine the impact of DSS in the Logan Beaudesert area. Specifically, the study aims to identify the key elements and domains of information that are needed to develop healthy communities, to develop a conceptual planning framework for creating healthy communities, to collaboratively develop and implement an online GIS-based Health DSS (i.e., HDSS), and to examine the impact of the HDSS on local decision-making processes. The study is based on a real-world case study of a community-based initiative that was established to improve public health outcomes and promote new ways of addressing chronic disease. The study involved the development of an online GIS-based health decision support system (HDSS), which was applied in the Logan Beaudesert region of Queensland, Australia. A planning framework was developed to account for the way in which information could be organised to contribute to a healthy community. The decision support system was developed within a unique settings-based initiative Logan Beaudesert Health Coalition (LBHC) designed to plan and improve the health capacity of Logan Beaudesert area in Queensland, Australia. This setting provided a suitable platform to apply a participatory research design to the development and implementation of the HDSS. Therefore, the HDSS was a pilot study examined the impact of this collaborative process, and the subsequent implementation of the HDSS on the way decision-making was perceived across the LBHC. As for the method, based on a systematic literature review, a comprehensive planning framework for creating healthy communities has been developed. This was followed by using a mixed method design, data were collected through both qualitative and quantitative methods. Specifically, data were collected by adopting a participatory action research (PAR) approach (i.e., PAR intervention) that informed the development and conceptualisation of the HDSS. A pre- and post-design was then used to determine the impact of the HDSS on decision-making. The findings of this study revealed a meaningful framework for organising information to guide planning for healthy communities. This conceptual framework provided a comprehensive system within which to organise existing data. The PAR process was useful in engaging stakeholders and decision-making in the development and implementation of the online GIS-based DSS. Through three PAR cycles, this study resulted in heightened awareness of online GIS-based DSS and openness to its implementation. It resulted in the development of a tailored system (i.e., HDSS) that addressed the local information and planning needs of the LBHC. In addition, the implementation of the DSS resulted in improved decision- making and greater satisfaction with decisions within the LBHC. For example, the study illustrated the culture in which decisions were made before and after the PAR intervention and what improvements have been observed after the application of the HDSS. In general, the findings indicated that decision-making processes are not merely informed (consequent of using the HDSS tool), but they also enhance the overall sense of ‗collaboration‘ in the health planning practice. For example, it was found that PAR intervention had a positive impact on the way decisions were made. The study revealed important features of the HDSS development and implementation process that will contribute to future research. Thus, the overall findings suggest that the HDSS is an effective tool, which would play an important role in the future for significantly improving the health planning practice.

Disputes in Everyday Life : Social and Moral Orders of Children and Young People

"The research presented in this volume has been undertaken in a range of settings and across ages, to display the rich, varied, and complex aspects of children and young people's everyday lives. The papers contribute to understanding children's disputes, framed as forms of social practice, by closely examining children's talk and interaction in disputes to offer insight into how they arrange their social lives within the context of school, home, neighborhood, correctional, and cafe settings. As such, this volume contributes to an emerging body of edited volumes that investigate children and young people's everyday interactions (Cromdal, 2009; Cromdal & Tholander, in press; Gardner & Forrester, 2010; Goodwin & Kyratzis, 2007; Hutchby & Moran-Ellis, 1998). Each paper has been peer reviewed, by respected researchers of the field, in some cases authors of this volume, and revised. We also thank Charlotte Cobb-Moore who so ably assisted in the final preparation of the manuscripts."---publisher website

Introduction : disputes in everyday life – Social and moral orders of children and young people

Volume 15 of Sociological Studies of Children and Youth (SSYC) presents a rich description of children’s and young people’s disputes. Children and young people live and experience their youth in a variety of contexts, settings and situations in contemporary society, and the studies discussed in this volume draw on empirical data to investigate the interactional procedures used by children and young people as disputes arise in varying contexts of their everyday life. The aim of this volume is to extend current understandings of on children’s disputes by examining how, in the varying arenas and social worlds of children and young people, matters of ownership, alignment and social and moral order are always at play. Applying a sociological perspective, the research papers in this special volume show that disputes can offer analytic opportunities to examine, and make visible typically unseen social and moral orders. This consideration provides rich accounts of dispute practices within social and institutional contexts.

Visual support for work assignment in process-aware information systems : framework formalisation and implementation

Process-aware information systems, ranging from generic workflow systems to dedicated enterprise information systems, use work-lists to offer so-called work items to users. In real scenarios, users can be confronted with a very large number of work items that stem from multiple cases of different processes. In this jungle of work items, users may find it hard to choose the right item to work on next. The system cannot autonomously decide which is the right work item, since the decision is also dependent on conditions that are somehow outside the system. For instance, what is “best” for an organisation should be mediated with what is “best” for its employees. Current work-list handlers show work items as a simple sorted list and therefore do not provide much decision support for choosing the right work item. Since the work-list handler is the dominant interface between the system and its users, it is worthwhile to provide an intuitive graphical interface that uses contextual information about work items and users to provide suggestions about prioritisation of work items. This paper uses the so-called map metaphor to visualise work items and resources (e.g., users) in a sophisticated manner. Moreover, based on distance notions, the work-list handler can suggest the next work item by considering different perspectives. For example, urgent work items of a type that suits the user may be highlighted. The underlying map and distance notions may be of a geographical nature (e.g., a map of a city or office building), but may also be based on process designs, organisational structures, social networks, due dates, calendars, etc. The framework proposed in this paper is generic and can be applied to any process-aware information system. Moreover, in order to show its practical feasibility, the paper discusses a full-fledged implementation developed in the context of the open-source workflow environment YAWL, together with two real examples stemming from two very different scenarios. The results of an initial usability evaluation of the implementation are also presented, which provide a first indication of the validity of the approach.

A framework for the education of the information professions in Australia.

In recent years there has been considerable discussion afforded to the challenges facing the future of library and information science (LIS) education in Australia. This paper outlines a twelve-month project funded by the Australian Learning and Teaching Council that was undertaken by eleven institutions representing university and vocational LIS education in Australia. The project established a Framework for the Education of the Information Professions in Australia that provides a set of strategic recommendations that will inform future directions of Australian LIS education. This national project represented a bold move within Australian LIS education, and provided a unique opportunity for LIS educators across Australia to collectively unite in order to ‘future-proof’ education for future generations of LIS professionals.

The maturity model concept as framework for assessing the capability of higher education institutions to address student engagement, success and retention : new horizon or false dawn?

While the engagement, success and retention of first year students are ongoing issues in higher education, they are currently of considerable and increasing importance as the pressures on teaching and learning from the new standards framework and performance funding intensifies. This Nuts & Bolts presentation introduces the concept of a maturity model and its application to the assessment of the capability of higher education institutions to address student engagement, success and retention. Participants will be provided with (a) a concise description of the concept and features of a maturity model; and (b) the opportunity to explore the potential application of maturity models (i) to the management of student engagement and retention programs and strategies within an institution and (ii) to the improvement of these features by benchmarking across the sector.

A risk simulation framework for information infrastructure protection

Information communication and technology (ICT) systems are almost ubiquitous in the modern world. It is hard to identify any industry, or for that matter any part of society, that is not in some way dependent on these systems and their continued secure operation. Therefore the security of information infrastructures, both on an organisational and societal level, is of critical importance. Information security risk assessment is an essential part of ensuring that these systems are appropriately protected and positioned to deal with a rapidly changing threat environment. The complexity of these systems and their inter-dependencies however, introduces a similar complexity to the information security risk assessment task. This complexity suggests that information security risk assessment cannot, optimally, be undertaken manually. Information security risk assessment for individual components of the information infrastructure can be aided by the use of a software tool, a type of simulation, which concentrates on modelling failure rather than normal operational simulation. Avoiding the modelling of the operational system will once again reduce the level of complexity of the assessment task. The use of such a tool provides the opportunity to reuse information in many different ways by developing a repository of relevant information to aid in both risk assessment and management and governance and compliance activities. Widespread use of such a tool allows the opportunity for the risk models developed for individual information infrastructure components to be connected in order to develop a model of information security exposures across the entire information infrastructure. In this thesis conceptual and practical aspects of risk and its underlying epistemology are analysed to produce a model suitable for application to information security risk assessment. Based on this work prototype software has been developed to explore these concepts for information security risk assessment. Initial work has been carried out to investigate the use of this software for information security compliance and governance activities. Finally, an initial concept for extending the use of this approach across an information infrastructure is presented.